CVE-2026-92512

A flaw was found in the Linux kernel's RDMA core component. A local attacker could exploit a use-after-free vulnerability due to improper synchronization during the Query Packet QP destruction process. This could lead to a system crash, resulting in a denial of service, or potentially allow for...

CVE-2026-92507

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access core component. A synchronization issue in the ibdeallocpduser function, when a Protection Domain PD is accessed via the netlink path, can lead to a use-after-free vulnerability. This could allow a local attacker to potential...

CVE-2026-92482

A flaw was found in the Linux kernel's pinctrl Mediatek driver. This vulnerability occurs because the gpiochip memory is freed prematurely while it is still registered, leading to a use-after-free condition. This can happen when the driver is built as a module and then unloaded. A local attacker...

CVE-2026-90421

A flaw was found in the Linux kernel's Peripheral Component Interconnect PCI subsystem. This Use-After-Free UAF vulnerability arises when a PCI device probe operation occurs concurrently with the removal of a dynamic ID. This timing issue could allow a local attacker to cause a system crash,...

CVE-2026-90353

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. This vulnerability arises from a use-after-free error in the external PHY physical layer registration error path. When the main PHY initialization fails after the external PHY has been registered, the external PHY hardware is prematurely...

CVE-2026-43856

A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes...

CVE-2026-43857

A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service...

EUVD-2026-104860

A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution...

CVE-2026-43858

A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution...

EUVD-2026-104859

A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service...

CVE-2026-43857

Technical details regarding the specific software, component, or root cause for CVE-2026-43857 are not publicly available in the provided documents. The description only states that a remote authenticated attacker could achieve arbitrary code execution with service privileges. Monitor for further...

CVE-2026-43857

A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service...

CVE-2026-43856

A stack-based buffer overflow vulnerability exists in the FileProcess::CheckDir function. This flaw could allow a remote authenticated attacker to achieve arbitrary code execution by providing a path longer than 1024 bytes . No specific software vendor or version is explicitly identified in the p...

CVE-2026-43856

A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes...

EUVD-2026-104857

A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes...

EUVD-2026-104856

A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution...

WordPress Royal Elementor Addons plugin <= 1.7.1068 - Arbitrary Code Execution vulnerability

Arbitrary Code Execution vulnerability discovered by Intrudify in WordPress Plugin Royal Elementor Addons versions = 1.7.1068...

CVE-2026-113404

WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded cryptographic key to craft and submit malicious serialized data, thereby executing arbitrary code on the server...

ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan

Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said has been exploited in ClickFix attacks. The high-severity vulnerability, tracked as CVE-2026-110936 CVSS v4 score: 8.4, could allow an attacker to place a specially-crafted DLL in a directory the...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.39 security and extras update

Red Hat OpenShift Container Platform release 4.21.39 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...